Measuring D'ej`a vu Memorization Efficiently
Not on the map. Why?
Abstract (arXiv)
Recent research has shown that representation learning models may accidentally memorize their training data. For example, the d'ej`a vu method shows that for certain representation learning models and training images, it is sometimes possible to correctly predict the foreground label given only the representation of the background - better than through dataset-level correlations. However, their measurement method requires training two models - one to estimate dataset-level correlations and the other to estimate memorization. This multiple model setup becomes infeasible for large open-source models. In this work, we propose alternative simple methods to estimate dataset-level correlations, and show that these can be used to approximate an off-the-shelf model's memorization ability without any retraining. This enables, for the first time, the measurement of memorization in pre-trained open-source image representation and vision-language representation models. Our results show that different ways of measuring memorization yield very similar aggregate results. We also find that open-source models typically have lower aggregate memorization than similar models trained on a subset of the data. The code is available both for vision and vision language models.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Builds on 22 of its 30 references that are in the map. First posted on arXiv 8 Apr 2025.
Builds on
22 of 30 references.
References · 22
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2023Visual Instruction Tuningcited by 7,869
- 2021Emerging Properties in Self-Supervised Vision Transformerscited by 6,968
- 2023Grounding DINO: Marrying DINO with Grounded Pre-Training for Open-Set Object Detectioncited by 3,332
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2021Barlow Twins: Self-Supervised Learning via Redundancy Reductioncited by 1,838
- 2017Understanding Black-box Predictions via Influence Functionscited by 1,741
- 2021VICReg: Variance-Invariance-Covariance Regularization for Self-Supervised Learningcited by 1,057
- 2021Membership Inference Attacks From First Principlescited by 878
- 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 864
10 more
- 2022Detecting Twenty-thousand Classes using Image-level Supervisioncited by 614
- 2019Does Learning Require Memorization? A Short Tale about a Long Tailcited by 460
- 2022Deduplicating Training Data Mitigates Privacy Risks in Language Modelscited by 314
- 2024Do Membership Inference Attacks Work on Large Language Models?cited by 195
- 2021On the Importance of Difficulty Calibration in Membership Inference Attackscited by 147
- 2021A Study of Face Obfuscation in ImageNetcited by 83
- 2021EncoderMI: Membership Inference against Pre-trained Encoders in Contrastive Learningcited by 73
- 2022Are Attribute Inference Attacks Just Imputation?cited by 49
- 2021Quantifying and Mitigating Privacy Risks of Contrastive Learningcited by 36
- 2023Do SSL Models Have D'ej`a Vu? A Case of Unintended Memorization in Self-supervised Learningcited by 19
Built on by
Citing papers per year: 2025: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2024D'ej`a Vu Memorization in Vision-Language Models
- 2025Demystifying Foreground-Background Memorization in Diffusion Models
- 2025Memorization in 3D Shape Generation: An Empirical Study
- 2025Unsupervised Memorability Modeling from Tip-of-the-Tongue Retrieval Queries
- 2024A Geometric Framework for Understanding Memorization in Generative Models
- 2023What do larger image classifiers memorise?
- 2024Embedding Space Selection for Detecting Memorization and Fingerprinting in Generative Models
- 2025SolidMark: Evaluating Image Memorization in Generative Models